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Abstract. Qualification has been recently introduced as a generaliza- 
tion of uncertainty in the field of Logic Programming. In this report we 
investigate a more expressive language for First-Order Functional Logic 
Programming with Constraints and Qualification. We present a Rewrit- 
ing Logic which characterizes the intended semantics of programs, and 
a prototype implementation based on a semantically correct program 
transformation. Potential applications of the resulting language include 
flexible information retrieval. As a concrete illustration, we show how to 
write program rules to compute qualified answers for user queries con- 
cerning the books available in a given library. 

Keywords: Constraints, Functional Logic Programming, Program Trans- 
formation, Qualification, Rewriting Logic. 



1 Introduction 

Various extensions of Logic Programming with uncertain reasoning capabilities 
have been widely investigated during the last 25 years. The recent recollection 
[21] reviews the evolution of the subject from the viewpoint of a committed 
researcher. All the proposals in the field replace classical two-valued logic by 
some kind of many- valued logic with more than two truth values, which are 
attached to computed answers and interpreted as truth degrees. 

In a recent work |19ll8j we have presented a Qualified Logic Programming 
scheme QLP(2?) parameterized by a qualification domain V, a lattice of so-called 
qualification values that are attached to computed answers and interpreted as a 
measure of the satisfaction of certain user expectations. QLP(P)-programs are 
sets of clauses of the form A B, where the head A is an atom, the body B 
is a conjunction of atoms, and a G T> is called attenuation factor. Intuitively, 
a measures the maximum confidence placed on an inference performed by the 
clause. More precisely, any successful application of the clause attaches to the 
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head a qualification value which cannot exceed the infimuni of a o £ T>, where 
(3i are the qualification values computed for the body atoms and o is a so-called 
attenuation operator, provided by V. 

Uncertain Logic Programming can be expressed by particular instances of 
QLP(2?), where the user expectation is understood as a lower bound for the 
truth degree of the computed answer and T> is chosen to formalize a lattice of 
non-classical truth values. Other choices of T> can be designed to model other 
kinds of user expectations, as e.g. an upper bound for the size of the logical proof 
underlying the computed answer. As shown in [4], the QLP(£>) scheme is also well 
suited to deal with Uncertain Logic Programming based on similarity relations 
in the line of [20 . Therefore, Qualified Logic Programming has a potential for 
flexible information retrieval applications, where the answers computed for user 
queries may match the user expectations only to some degree. As shown in [19] . 
several useful instances of QLP(2?) can be conveniently implemented by using 
constraint solving techniques. 

In this report we investigate an extension of QLP(2?) to a more expres- 
sive scheme, supporting computation with first-order lazy functions and con- 
straints. More precisely, we consider the first-order fragment of CFLP(C), a 
generic scheme for functional logic programming with constraints over a para- 
metrically given domain C presented in |13) . We propose an extended scheme 
QCFLP(2?, C) where the additional parameter V stands for a qualification do- 
main. QCFLP(£>, C)-programs are sets of conditional rewrite rules of the form 
f(Jn) r <= A, where the condition A is a conjunction of C-constraints that 
may involve user defined functions, and a £ D is an attenuation factor. As in 
the logic programming case, a measures the maximum confidence placed on an 
inference performed by the rule: any successful application of the rule attaches 
to the computed result a qualification value which cannot exceed the infimum 
of a o f3i &T>, where (3i are the qualification values computed for r and A, and o 
is 2?'s attenuation operator. QLP(X>) program clauses can be easily formulated 
as a particular case of QCFLP(£>,C) program rules. 

As far as we know, no related work covers the expressivity of our approach. 
Guadarrama et al. [5] have proposed to use real arithmetic constraints as an 
implementation tool for a Fuzzy Prolog, but their language does not support 
constraint programming as such. Starting from the field of natural language pro- 
cessing, Riezler [15116] has developed quantitative and probabilistic extensions 
of the classical CLP(C) scheme with the aim of computing good parse trees for 
constraint logic grammars, but his work bears no relation to functional program- 
ming. Moreno and Pascual [14] have investigated similarity-based unification in 
the context of needed narrowing [T|, a narrowing strategy using so-called defini- 
tional trees that underlies the operational semantics of functional logic languages 
such as Curry [9] and TOy [3], but they use neither constraints nor attenuation 
factors and they provide no declarative semantics. The approach of the present 
report is quite different. We work with a class of programs more general and 
expressive than the inductively sequential term rewrite systems used in |14) , and 
our results focus on a rewriting logic used to characterize declarative semantics 
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and to prove the correctness of an implementation technique based on a pro- 
gram transformation. Similarity relations could be easily incorporated to our 
scheme by using the techniques presented in [4] for the Logic Programming case. 
Moreover, the good properties of needed narrowing as a computation model are 
not spoiled by our implementation technique, because our program transforma- 
tion preserves the structure of the definitional trees derived from the user-given 
program rules. 

7o% Data types : 

type pages, id = int 

type title, author, language, genre = [char] 

data vocabularyLevel = easy I medium I difficult 

data readerLevel = basic I intermediate I upper I proficiency 

data book = bookCid, title, author, language, genre, vocabularyLevel, pages) 

°/o% Simple library, represented as list of books: 
library : : [book] 

library — > [ book(l, "Tintin", "Herge", "French", "Comic", easy, 65), 

book(2, "Dune", "F. P. Herbert", "English", "SciFi", medium, 345), 
book(3, "Kritik der reinen Vernunft", "Immanuel Kant", "German", 

"Philosophy", difficult, 1011), 
book(4, "Beim Hauten der Zwiebel", "Gunter Grass", "German", 

"Biography" , medium, 432) ] 

VL Auxiliary function for computing list membership: 

member CB,[]) — > false 

member (B,H:_T) — > true <== B == H 

member (B,H:T) — > member (B,T) <== B /= H 

VL Functions for getting the explicit attributes of a given book: 
getId(book(Id,_Title ) _Author,_Lang,_Genre,_VocLvl,_Pages)) — > Id 
getTitle (book (_Id, Title, .Author, _Lang, _Genre , _VocLvl , _Pages) ) — > Title 
get Author (book (_Id , _Title , Author , _Lang , _Genre , _VocLvl , _Pages) ) — > Author 
getLanguage (book(_Id , _Title , _ Author , Lang , _Genre , _VocLvl , _Pages) ) — > Lang 
getGenre (book(_Id, _Title , _ Author , _Lang, Genre , _VocLvl, _Pages) ) — > Genre 
get VocabularyLevel (book(_Id, _Title , _Author , _Lang, _Genre , VocLvl , _Pages) ) — > VocLvl 
get Pages (book(_Id, _Title , _Author , _Lang,_Genre , _VocLvl , Pages) ) — > Pages 

7o7o Function for guessing the genre of a given book: 
guessGenre (B) — > getGenre (B) 

guessGenre (B) -0 . 9-> "Fantasy" <== guessGenre (B) == "SciFi" 
guessGenre (B) -0 . 8-> "Essay" <== guessGenre (B) == "Philosophy" 
guessGenre (B) -0 . 7-> "Essay" <== guessGenre (B) == "Biography" 
guessGenre (B) -0.7-> "Adventure" <== guessGenre (B) == "Fantasy" 

°/o7« Function for guessing the reader level of a given book: 

guessReaderLevel (B) — > basic <== getVocabularyLevel (B) == easy, getPages(B) < 50 
guessReaderLevel (B) -0.8-> intermediate <== getVocabularyLevel (B) == easy, getPages(B) >= 50 
guessReaderLevel (B) -0.9-> basic <== guessGenre (B) == "Children" 
guessReaderLevel(B) -0.9-> proficiency <== getVocabularyLevel (B) == difficult, 

getPages(B) >= 200 

guessReaderLevel (B) -0.8-> upper <== getVocabularyLevel (B) == difficult, getPages(B) < 200 
guessReaderLevel (B) -0.8-> intermediate <== getVocabularyLevel (B) == medium 
guessReaderLevel (B) -0.7-> upper <== getVocabularyLevel (B) == medium 

%°/ Function for answering a particular kind of user queries: 

search(Language, Genre, Level) — > getld(B) <== member(B, library) , 

getLanguage (B) == Language, 
guessReaderLevel (B) == Level, 
guessGenre (B) == Genre 



Fig. 1. Library with books in different languages 
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Figure Q] shows a small set of QCFLP(W, 1Z) program rules, called the library 
program in the rest of the report. The concrete syntax is inspired by the func- 
tional logic language TOy, but the ideas and results of this report could be also 
applied to Curry and other similar languages. In this example, U stands for a 
particular qualification domain which supports uncertain truth values in the real 
interval [0, 1], while 1Z stands for a particular constraint domain which supports 
arithmetic constraints over the real numbers; see Section [2] for more details. 

The program rules are intended to encode expert knowledge for computing 
qualified answers to user queries concerning the books available in a simplified 
library, represented as a list of objects of type book. The various get func- 
tions extract the explicit values of book attributes. Functions guessGenre and 
guessReaderLevel infer information by performing qualified inferences, relying 
on analogies between different genres and heuristic rules to estimate reader lev- 
els on the basis of other features of a given book, respectively. Some program 
rules, as e.g. those of the auxiliary function member, have attached no explicit 
attenuation factor. By convention, this is understood as the implicit attach- 
ment of the attenuation factor 1 . 0, the top value of U. For any instance of the 
QCFLP(2?, C) scheme, a similar convention allows to view CFLP(C)-program 
rules as QCFLP(£>, C)-program rules whose attached qualification is optimal. 

The last rule for function search encodes a method for computing qualified 
answers to a particular kind of user queries. Therefore, the queries can be formu- 
lated as goals to be solved by the program fragment. For instance, answering the 
query of a user who wants to find a book of genre "Essay", language "German" 
and user level intermediate with a certainty degree of at least 0.65 can be 
formulated as the goal: 

(searchO'German" , "Essay", intermediate) == R) # W I W >= 0.65 

The techniques presented in SectionS]can be used to translate the QCFLP(W, 1Z) 
program rules and goal into the CFLP(7?.) language, which is implemented in 
the TOy system. Solving the translated goal in TOy computes the answer 
{R n- 4}{0.65 < W, W < 0.7}, ensuring that the library book with id 4 satisfies 
the query's requirements with any certainty degree in the interval [0.65,0.7], in 
particular 0.7. The computation uses the 4th program rule of guessGenre to 
obtain "Essay" as the book's genre with qualification 0.7, and the 6th program 
rule of guessReaderLevel to obtain intermediate as the reader level with 
qualification 0.8. 

The rest of the report is organized as follows. In Section [2] we recall known 
proposals concerning qualification and constraint domains, and we introduce a 
technical notion needed to relate both kinds of domains for the purposes of this 
report. In Section [3] we present the generic scheme QCFLP(£>,C) announced in 
this introduction, and we formalize a special Rewriting Logic which characterizes 
the declarative semantics of QCFLP(£>, C)-programs. In Section |4] we present a 
semantically correct program transformation converting QCFLP(2?, C) programs 
and goals into the qualification- free CFLP(C) programming scheme, which is 
supported by existing systems such as TOy. Section [5] concludes and points to 
some lines of planned future work. 
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2 Qualification and Constraint Domains 

Qualification Domains were introduced in |19j . Their intended use has been al- 
ready explained in the Introduction. In this section we recall and slightly improve 
their axiomatic definition. 

Definition 1 (Qualification Domains). A Qualification Domain is any struc- 
ture T> = (D, ^,b,t,o) verifying the following requirements: 

1. D, noted as D-p when convenient, is a set of elements called qualification 
values. 

2. (D, ^J, b, t) is a lattice with extreme points b and t w.r.t. the partial ordering 
^. For given elements d,e £ D, we write d l~l e for the greatest lower bound 
(gib) of d and e, and d U e for the least upper bound (lub) of d and e. We 
also write d <\ e as abbreviation for d ^ e A d ^ e. 

3. o : D x D — > D , called attenuation operation, verifies the following axioms: 

(a) o is associative, commutative and monotonic w.r.t. §3. 

(b) Md e D : d o t = d. 

(c) Md, e E D \ {b, t} : d o e < e. 

(d) VcZ, ei, e% G D : d o (ei n e%) = d o e\ n <i o e2. □ 

As an easy consequence of the previous definition one can prove the following 
proposition. Q| 

Proposition 1 (Additional properties of qualification domains). Any 

qualification domain T> satisfies the following properties: 

1. \/d, e e D : do e ^ e. 

2. yd e D : dob = b. 

Proof. Since t is the top element of the lattice, we know d $3 t for any d 6 D. 
As o is monotonic w.r.t. §3, doe ^ toe also holds for any e 6 D which, due 
to commutativity and axiom (b) of o, yields do e ^ e. Therefore -/. holds. Now, 
taking e = b, one has d o b ^ b which implies d o b = b as b is the bottom 
element of the lattice. Hence 2. also holds. □ 

The examples in this report will use a particular qualification domain hi 
whose values represent certainty degrees in the sense of fuzzy logic. Formally, 
U = (U, <,0,1, x), where U = [0, 1] = {d 6 K | < d < 1}, < is the usual 
numerical ordering, and x is the multiplication operation. In this domain, the 
bottom and top elements are b = and t = 1, and the infimum of a finite 
S C U is the minimum value min(5), understood as 1 if S = 0. The class of 
qualification domains is closed under cartesian products. For a proof of this fact 
and other examples of qualification domains, the reader is referred to [19118] . 

Constraint domains are used in Constraint Logic Programming and its ex- 
tensions as a tool to provide data values, primitive operations and constraints 
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tailored to domain-oriented applications. Various formalizations of this notion 
are known. In this report, constraint domains are related to signatures of the 
form E = (DC,PF,DF) where DC = [j neN DC n , PF = {Jne^ PFn and 
DF — U„ eN DF n are mutually disjoint sets of data constructor symbols, primi- 
tive function symbols and defined function symbols, respectively, ranked by ari- 
ties. Given a signature E, a symbol _L to note the undefined value, a set B of basic 
values u and a countably infinite set Var of variables X, we define the notions 
listed below, where o n abbreviates the n-tuple of syntactic objects o±, . . . , o n . 

— Expressions e e Exp^ (E, B, Var) have the syntax e ::= _L|X|u|/i(e n ), where 
h 6 DC" U PF n U DF n . In the case n = 0, h(e n ) is written simply as h. 

— Constructor Terms t £ Termj_(I7, B, Var) have the syntax e ::= _L|X|u|c(i„), 
where c G DC n . They will be called just terms in the sequel. 

— Total Expressions e 6 Exp (27, B, Var) and Total Terms t £ Term(27, B, Var) 
have a similar syntax, with the _L case omitted. 

— An expression or term (total or not) is called ground iff it includes no oc- 
currences of variables. Exp_|_ (27, B) stands for the set of all ground expres- 
sions. The notations Termj_(27, B), Exp(27, i?) and Term.(27, £?) have a sim- 
ilar meaning. 

— We note as C the information ordering, defined as the least partial ordering 
over Exp_|_(i7, B, Var) compatible with contexts and verifying 1 C e for all 
e G Exp x (E,B, Var). 

— Substitutions are defined as mappings a : Var — > Tcrmx(I7, B, Var) assigning 
not necessarily total terms to variables. They can be represented as sets of 
bindings X i-> t and extended to act over other syntactic objects o. The 
domain vdom(cr) and variable range vran(cr) are defined in the usual way. 
We will write oa for the result of applying o to o. The composition a a' of 
two substitutions is such that o(aa') equals (oa)a' . 

By adapting the definition found in Section 2.2 of [13] to a first-order setting, 
we obtain: |3 

Definition 2 (Constraint Domains). A Constraint Domain of signature E 
is any algebraic structure of the form C — (C, {p c \ p G PF}) such that: 

1. The carrier set C is Term±(E, B) for a certain set B of basic values. When 
convenient, we note B and C as Be and Cq, respectively. 

2. p c C C n x C, written simply as p c C C in the case n = 0, is called the 
interpretation of p in C. We will write p c (t n ) — > t (or simply p c — > t if 
n = 0) to indicate that (t n , t) G p c . 

3. Each primitive interpretation p c has monotonic and radical behavior w.r.t. 
the information ordering C. More precisely: 

(a) Monotonicity: For all p G PF n , p (t n ) — > t behaves monotonically 
w.r.t. the arguments t n and antimonotonically w.r.t. the result t. For- 
mally: For all t n , t' n , t,t' G C such that p c (t n ) t, t n C t' n and t □ t' , 
p c (t' n ) t' also holds. 

2 We slightly modify the statement of the radicality property, rendering it simpler than 
in [13] but sufficient for practical purposes. 
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(b) Radicality; For allp S PF n , as soon as the arguments given to p c have 
enough information to return a result other than _L, the same arguments 
suffice already for returning a simple total result. Formally: For all t n ,t <E 
C, ifp c (t n ) -> t then t = _L or else teBU DC . 

Note that symbols h G DCUDF are given no interpretation in C. As we will 
see in Section [3j symbols in c G DC are interpreted as free constructors, and the 
interpretation of symbols / £ DF is program-dependent. We assume that any 
signature S includes two miliary constructors true and false for the boolean 
values, and a binary symbol == G PF 2 used in infix notation and interpreted 
as strict equality; see [13] for details. For the examples in this report we will 
use a constraint domain 1Z whose set of basic elements is Cn = R and whose 
primitives functions correspond to the usual arithmetic operations +, x, . . . and 
the usual boolean- valued comparison operations <,<,... over R. Other useful 
instances of constraint domains can be found in |13j . 

Atomic constraints over C have the form p(e n ) == v [f| with p G PF n , 
Ci G Exp_ L (Z', B, Var) and v G Var U DC U Be- Atomic constraints of the form 
== true are abbreviated as p(e n ). In particular, (ei == e%) == true is 
abbreviated as e\ == e2- Atomic constraints of the form (ei == ei) == false 
are abbreviated as e\ /= e2- 

Compound constraints are built from atomic constraints using logical con- 
junction, existential quantification, and sometimes other logical operations. Con- 
straints without occurrences of symbols / G DF are called primitive. We will 
note atomic constraints as S, sets of atomic constraints as A, atomic primitive 
constraints as n, and sets of atomic primitive constraints as 77. When interpret- 
ing set of constraints, we will treat them as the conjunction of their members. 

Ground substitutions rj such that Xn G Teim±(E,B) for all X G vdom(^) 
are called variable valuations over C. The set of all possible variable valuations is 
noted Vale- The solution set Sole (FF) C Vale includes as members those valua- 
tions n such that irrj is true in C for all it G 77; see |13j for a formal definition. In 
case that Sole (77) = we say that 77 is unsatisfiable and we write Unsafe (77). 
In case that Sole (77) C Sole (tt) we say that ir is entailed by 77 in C and we write 
n \=c tt- Note that the notions defined in this paragraph only make sense for 
primitive constraints. 

In this report we are interested in pairs consisting of a qualification domain 
and a constraint domain that are related in the following technical sense: 

Definition 3 (Expressing V in C). A qualification domain V with carrier set 
D-d is expressible in a constraint domain C with carrier set Cc if Dx>\{h} C Cc 
and the two following requirements are satisfied: 

1. There is a primitive C-constraint qVal(AT) depending on the variable X , such 
that S*ofc(qVal(X)) = {n G Vale \ r,{X) G D-p \ {b}}. 

2. There is a primitive C-constraint qBound(A, Y, Z) depending on the variables 
X , Y . Z, such that any n G Vale such that r)(X), T)(Y), T](Z) G D-p \ {b} 
verifies T 1 eSol c {qBound{X,Y,Z))<^r ] (X)^r 1 (Y)on(Z). □ 

3 Written as p(e n ) ->! v in [13]. 
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Intuitively, qBound(A", Y, Z) encodes the £>-statement X ^ Y o Z as a C- 
constraint. As convenient notations, we will write r X ^ Y o Z n , r X $3 Y n and 
r X ^ Y n in place of qBound(X, Y, Z), qBound(A, t, Y) and qBound(Y", t, X), 
respectively. In the sequel, C-constraints of the form r n n are called qualification 
constraints, and fl is used as notation for sets of qualification constraints. We 
also write Valu for the set of all /x € Vale such that X/x G Dx> \ {b} for all 
X G vdom(/i), called T> -valuations. 

Note that U can be expressed in 1Z, because Du \ {0} = (0, 1] C R C C-r, 
qVal(X) can be built as the ^-constraint < X A X < 1 and r X «3 Y o Z n 
can be built as the 7\L-constraint X < Y x Z. Other instances of qualification 
domains presented in |19) are also expressible in 1Z. 

3 A Qualified Declarative Programming Scheme 

In this section we present the scheme QCFLP(Z), C) announced in the Introduc- 
tion, and we develop alternative characterizations of its declarative semantics 
using an interpretation transformer and a rewriting logic. The parameters D 
and C respectively stand for a qualification domain and a constraint domain 
with certain signature S. By convention, we only allow those instances of the 
scheme verifying that V is expressible in C in the sense of Definition [3] For 
example, QCFLP(W,7?.) is an allowed instance. 

Technically, the results presented here extend similar ones known for the 
CFLP(C) sheme [13], omitting higher-order functions and adding a suitable treat- 
ment of qualifications. In particular, the qc-interpretations for QCFLP(£>,C)- 
programs are a natural extension of the c-interpretations for CFLP(C)-programs 
introduced in [13]. In turn, these were inspired by the 7r-interpretations for the 
CLP(C) scheme proposed by Dore, Gabbrielli and Levi |7I6| . 

3.1 Programs, Interpretations and Models 

A QCFLP(P, C)-program is a set V of program rules. A program rule has the 
form f(t n ) — > T <= A where / G DF n , t n is a lineal sequence of I7-terms, 
a G Dp \ {b} is an attenuation factor, r is a ^-expression and A is a sequence of 
atomic C-constraints 5j (1 < j < m), interpreted as conjunction. The undefined 
symbol _L is not allowed to occur in program rules. 

The library program shown in Figure [T] is an example of QCFLP(W, TVj- 
program. Leaving aside the attenuation factors, this is clearly not a conflu- 
ent conditional term rewriting system. Certain program rules, as e.g. those for 
guessGenre, are intended to specify the behavior of non- deterministic junctions. 
As argued elsewhere [T7], the semantics of non-deterministic functions for the 
purposes of Functional Logic Programming is not suitably described by ordinary 
rewriting. Inspired by the approach in }13) . we will overcome this difficulty by 
designing special inference mechanisms to derive semantically meaningful state- 
ments from programs. The kind of statements that we will consider are defined 
below: 
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Definition 4 (qc-Statements). Assume partial E '-expression e, partial X- 
terms t, t',t n , a qualification value d € D-d \ { D }, o- n atomic C-constraint 8 and a 
finite set of atomic primitive C-constraints 77. A qualified constrained statement 
(briefly, qc-statement) Lp must have one of the following two forms: 

1. qc-production (e — > t)$d 77. Such a qc-statement is called trivial iff either 
t is _!_ or else Unsatc{II). Its intuitive meaning is that a rewrite sequence 
e — >* t' using program rules and with attached qualification value d is allowed 
in our intended semantics for some t' □ t, under the assumption that H 
holds. By convention, qc-productions of the form (/(in) t)$d <= II with 
f 6 DF n are called qc- facts. 

2. qc-atom 5$d <= II. Such a qc-statement is called trivial iff Unsatc(II) . Its 
intuitive meaning is that S is entailed by the program rules with attached 
qualification value d, under the assumption that II holds. □ 

Our semantics will use program interpretations denned as sets of qc-facts with 
certain closure properties. As an auxiliary tool we need the following technical 
notion: 

Definition 5 ((T>, C)-Entailment). Given two qc-statements tp and Lp' , we say 

that Lp (T>,C)- entails Lp 1 (in symbols, Lp >pt>.c <f r ) iff one of the following two cases 
hold: 

1. Lp = (e — ► t)$d <f= 77, Lp' = (e! — > t')$d' TV , and there is some substitution 
a such that II' (=c 77 a, d^ d! , eo C e' and tcr □ t'. 

2. Lp — 8$d <= 77, Lp' = 5'$d' <= TV , and there is some substitution a such that 
77' (=c n<j, d ^ d', 5<j C 6'. □ 

The intended meaning of ip ^v,C i s that Lp' follows from Lp, regardless 
of the interpretation of the defined function symbols / 6 DF occurring in Lp, 
Lp' . Intuitively, this is the case because the interpretations of defined function 
symbols are expected to satisfy the monotonicity properties stated for the case 
of primitive function symbols in Definition [5] The following example may help 
to understand the idea: 

Example 1 ((IA, TV) -entailment). Let Lp, Lp' be defined as: 

Lp : (f(X:Xs) -> Xs)))0.8 ^Ixl/O 
iff : (f(A:(B:[])) ±:±)jj0.7 ^ A < 

Then ip ^u,n <p' with a = {X M> A, Xs n> 73:_L} because: 

- 77' ^ n na, since 77' = {A < 0}, TIo = {X x X ^ 0}<r = {A x A ^ 0}, and 
A x A j£ is entailed by A < in TZ. 

- d&d' holds in U, since d = 0.8 > 0.7 = d! . 

- eo- C e', since ea = f(X:Xs)a = f{A:{B:L)) C f(A:{B :[])) = e'. 

- to- □ f , since to = Xsa = B : JL □ JL : _L = t' . □ 

Now we can define program interpretations as follows: 
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Definition 6 (qc-Interpretations). A qualified constrained interpretation (or 
qc-interpretationj over T> and C is a set X of qc-facts including all trivial and 
entailed qc-facts. In other words, a set X of qc-facts such that cItj,c(Z) C X, 
where the closure over T> and C of I is defined as: 

cIt>,c(Z) —del {f | f trivial} U {</?' | if )^v,c ¥>' for some tp £ 1} . 

We write Intx>,c f or the set of all qc-interpretations over T> and C. 



QTI if tp is a trivial qc-statement. 

<P 

QRR -. r— if v e Var U B c and d G D-d \ {b}. 

[v — > vjfta 77 



QDC 



QDF 2 



( (a ->■ tjjjdj •<= 77 ) 1= i... n if c e 73C n and d € Dt> \ {b} 
(c(e„) ->■ c(7 n ))ttd -<= 77 verifies d < d 4 (1 < i < n). 

( (e* ti)jtdj 77 )»=!...„ 



(/(en) -»• *)(|rf 4= 77 



if / G 73F™, non-trivial ((/(?») -> i)jjdo ^ 77) G I 
and d G 7Jx> \ {b} verifies d ^1 di (0 < i < n). 

QPF ( (ei->t»)K^ 77 ) !...„ if ePF n VarUjDC o uB 
(p(e„) ->■ v)||d <S= 77 

77 \=c p(t n ) — ► w and d G Z?u \ {b} verifies d $1 di (1 < i < n). 

QAC ( (gl^MMl^g ifp G PF", «G Var U73C°U B C , 

(p(e„) == «)j)d <= 77 

77 p(?n) == u and d G Dc \ {b} verifies d di (1 < i < n). 



Fig. 2. Qualified Constrained Rewriting Logic for Interpretations 



Given a qc-interpretation I, the inference rules displayed in Fig. [5] are used 
to derive qc-statements from the qc-facts belonging to X. The inference system 
consisting of these rules is called Qualified Constrained Rewriting Logic for In- 
terpretations and noted as Z-QCRWL(D, C). The notation X Yrv,c f is used to 
indicate that ip can be derived from X in Z-QCRWL(Z), C). By convention, we 
agree that no other inference rule is used whenever QTI is applicable. Therefore, 
trivial qc-statements can only be inferred by rule QTI. As usual in formal infer- 
ence systems, Z-QCRWL(2?, C) proofs can be represented as trees whose nodes 
correspond to inference steps. 
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In the sequel, the inference rules QDFj, QPF and QAC will be called 
crucial. The notation \T\ will denote the number of inference steps within the 
proof tree T that are not crucial. Proof trees with no crucial inferences (i.e. such 
that \T\ = 0) will be called easy. The following lemma states some technical 
properties of I-QCRWL(P, C). 

Lemma 1 (Some properties of I-QCRWL(D, C)). 

1. Approximation property: For any non-trivial if of the form (t —¥ t')$d <= U 
where t,t' £ Termj_(S, B,Var), the three following affirmations are equiva- 
lent: (a) t □ t' ; (b) X H^-p.c <P with an easy proof tree; and (c) X M~v,c t P- 

2. Primitive c-atoms: For any primitive c-atom p(t n ) == v. one has X W~v,c 

(p(*») == v)U 4= n n he p(t n ) == v. 

3. Entailment property: X Vrv.c f with a proof tree T and Lp )^t>,c <p' =^ 
X W-"d,c f' with a proof tree T' such that \T'\ < \T\. 

4- Conservation property: For any qc-fact ip, one has X W-i>,c f <P S 

Proof. We argue separately for each of the four properties: 

[TJ] {Approximation property). The terms t and t' involve neither defined nor 
primitive function symbols. Due to the form of the Z-QCRWL(P,C) inference 
rules, a proof of the qc-statement (t — > t')$d <^= II will involve no crucial infer- 
ences and it will succeed iff t □ t'. A formal proof can be easily obtained reasoning 
by induction on the syntactic size of t, similarly as in item 3. of Lemma 1 from 

[2j] (Primitive c-atoms). Let ip be (p(t n ) == v)$d <= II. If tp is trivial, then 
I H~z>,c (p(t n ) == v)$d <= U can be proved with just one QTI inference, and 
H \=c p(t n ) —— v also holds because of Unsate(i7). If <p is not trivial, then: 

— (4=) Assume II \=c p(t n ) == v. Then X ^v,c {p{~tn) —— v)$d II can be 
obtained with a proof of the form 

( (t t -» tj)jt ^ n ) t=1 ... n 
( P (t n ) == v)u H 

where each of the n premises has an easy X-QCRWL(£>, C)-proof due to the 
approximation property (since ti 3 £»)* 

- (=^) Assume now X W- Vfi ip{t n ) == v)U <= II. The T-QCRWL(£>, C)-proof 
will have the form 

( (u -> t^di g n ) l=l ... n 
( P (t n ) == v)u * 

where U \=c pit 1 '„) == v and X Vrv.c [U ~ti)$di <= II, d ^ di hold for 
all 1 < i < n. Due to the approximation property, we can conclude that 
ti 3 t[ holds for 1 < i < n, which implies 77 |=c p(tn) == v because of the 
monotonic behavior of primitive functions in constraint domains. 
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[3l] (Entailment property). Assume X Vrv.c <P with a I-QCRWL(£>, C)-proof tree 
T ■ We must prove that X Yrj)fi f' with some proof tree T such that \T'\ < |T|. 
If tp' results trivial, then it is proved with just one QTI inference step, and 
therefore \T'\ = < \T\. In the sequel, we assume tp' non-trivial and we reason 
by induction on the number of inference steps within T. We distinguish cases 
according to the inference step at the root of T: 

— QTI: From Definition [5] it is easy to check that tp' must be trivial whenever 
f ^v,e <f' and tp is trivial. Since we are assuming that tp' is not trivial, this 
case cannot happen. 

— QRR: In this case tp is of the form (v —> u)jjd <= 77 with either v £ Be or 
v £ Var. Since tp ^t>,c f>' ■, we assume tp' : (v' — > v')$d' <= 77' with 77' \=c Bo, 

d! and va = v' for some substitution a. If v £ Be, then also v' £ Be and 
X Vrv,c can be proved with a proof tree T' consisting of just one QRR 
inference step. If v £ Var, then v' £ r £erm±(S, B, Var), and I W~t>,c v' can be 
proved with a proof tree T' consisting only of QDC and QRR inferences. 
In both cases, \T'\ = < \T\- 

— QDC: In this case tp : (c(e„) — » c(i„))ftd <= 77 and T has the form 

( (gj -> tj)Hrfj ^= 77 ) i= i,„ ra 
(c(e n ) -)• c(i„))ttd ^77 

where c e DC n , X H~x>,c ( e « - ► £i)itdj ^= ^ with proof tree 71, and d ^ 
di (1 < i < n). Since !?=:D,e f'i we can assume that tp' has the form 
(c^n) -> c(F n ))t)rf' ^= 77' with e 8 CT C e- (1 < i < ra), c(t„)<r □ c(F n ), d d' 
and 77' \=c Bo for some substitution a. For 1 < i < n, we clearly obtain 
(e, — » f-i)ttdj 77 ^=r>,c ( e i — ► ^)tt^i **= and by induction hypothesis 
we can assume I H-© c ( e i — ► iQftds ^= with proof tree T'i such that 
|T'i| < \V\. Then we get X W~ vfi {c(P n ) -> c(F M ))grf' 4= 77' with a proof 
tree T' such that |T'| < |T|. More precisely, 7"' has the form 

( (ej_-» t<)R_<= 77' ) i=1 ... n 
(c(e'„) -> c(tf n ))W <= n> 

where d! ^ di follows from d! ^ d ^ dj (1 < i < n) and each premise is 
proved by TV 

— QDFj: In this case tp : (/(e„) — > t)$d <= 77 and T has the form 

( (gj -> tQR ^ 77 )^i...„ 

(/(e„) -> t)J|d ^77 H x 

where / £ DF n and there is some non-trivial tp = (f(t n ) — > t)$do 77) such 
that tp £ I, X W-Dfi (ej — ?> ii)ftdi <= 77 with proof tree 77 and d ^ di (0 < 
i < n). Since ^ ^=x>. c v'j we can assume tp' = (f(e' n ) — > t')jjd' <*= 77' with 
ei(T C e'i (1 < i < n), ta □ i', d d' and 77' |=c 77 cr for some substitution 
a. For 1 < i < n, we get (e^ — > U)^di •<= 77 ^-p.c (ej — >• tia)^di <= 77', and by 
induction hypothesis we can assume X Vrv,c i e 'i — > Ucr)$di <= 77' with proof 
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tree T'% such that \T'i\ < \%\. Consider now ip' = ((f(t n )a ->• t')$d <= 77'). 
Clearly, ip >ft>,c ty' and therefore ip' G X because X is closed under (V, C)- 
entailment. Using this ip' we get X Vr-Dfi (f( e 'n) ~~ ^ t')$d' <= W with a proof 
tree 7~' such that \T'\ < \T\. More precisely, 7"' has the form 

( {e\ ^a)R g 77' 

(/(e'„) -> t')W ^n> 1 

where d! ^ dj follows from d' $j d ^ dj (0 < i < n) and each premise is 
proved by TV 

- QPF: In this case tp : (p(e n ) — > v)$d H and T has the form 

( (gj -> 4= 77 )j=i„, ra 

(p(e„) -> u)||d ^77 4 

where p 6 PF™, v G Var U 7JC° U B c , 77 (= c p(i„) ->• u, d sg d 4 and I H-£, )C 
(e, — > ti)$di <= 77 with proof tree % (1 < i < n.). Since </? ^=u,c <^', we can 
assume 92' to be of the form (p(e'„) — > u')jjd' 77' with ei<j C (1 < i < n), 
ucr □ u', d ^ d' and 77' |=c TZct for some substitution c. For 1 < % < n, we 
get {ei —> ti)$di <= 77 )pv.c ( e 'i Ua)^di <f= TV , and by induction hypothesis 
we can assume X H— p.c {&[ — > Ucr)$di <= TV with proof tree T'i such that 
\T'i\ < \7i\. Moreover, we can also assume v' G Var\jDC°UBc because p is a 
primitive function symbol and tp' is not trivial. From v, v' G Var U DC U Be 
and va □ v' we can conclude that va — v'. Then, from 77 \=c p(t n ) — > v 
and 77' \=c Tier we can deduce 77' \=c p(tn)& — > v'- Putting everything 
together, we get X Vrv,c (p(e'n) — > v')$d' <= 77' with a proof tree T' such 
that I T' I < |T|. More precisely, T' has the form 

( (ej g 77' ) i=1 ...„ 

(p(e'„) -> <«= 

where d! ^ d, follows from d' ^ d ^ d, (1 < i < n) and each premise is 
proved by 7~V 

- QAC: Similar to the case for QPF. 

jU] {Conservation property). Assume tp : (f(t n ) — > t)jjd 77. In the case that 
if is a trivial qc-fact, it is true by definition of qc-interpretation that tp G X, 
and X Yt-d.c f follows by rule QTI. Therefore the property is satisfied for trivial 
qc-facts. If tp is not trivial, we prove each implication as follows: 

- (<=) Assume tp el. Then X \^ v . c tp with a Z-QCRWL(X>, C)-proof tree of 
the form: 

( (t< -> ti)J(t <= 77 ) i=1 ...„ 



(/(in) -> t)ltd <= 



QDF X using tp ^X 



where each premise has an easy I-QCRWL(7J ) , C)-proof tree due to the ap- 
proximation property, and d ^ d, t hold trivially. 
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— (=>) Assume X W~t>,c f- As <p is not trivial, there is a I-QCRWL(2?, C)-proof 
tree of the form: 



where d ^ d',di and X Yt-d.c {t% ~^ ^)|td» n (1 < i < n). For each 
1 < i < n, we claim that ^ C ^, If f< = _L the claim is trivial. If t\ ^ _L, then 
(U — > ^)|}<ii II is a non-trivial qc-production and the claim follows from 
X W~t>,c (U — > t[)^di LT and the approximation property. Now, the claim 
together with LT II, d' ^ d and t □ t yields ip' >pv,c <£■ Since ip' G X and 
I is closed under (T>, C)-entailment, we can conclude that ip G X. □ 

Next, we can define program models and semantic consequence, adapting 
ideas from the so-called strong semantics of [13] . @ 

Definition 7 (Models and semantic consequence). Let a QCFLP(V,C)- 
program V be given. 

1. A qc- interpretation I is a model of Ri : (f(t n ) T <= 5 m ) G V (in 
symbols, X \=v,c Ri) iff for every substitution 9, for every set of atomic 
primitive C-constraints II, for every c-term t G Term±(S , B ,Var) and for 
all d, do, . . . , d m G Dt> \ {b} such that I H~x>,c SiOftd'i ■<= 11(1 < i < m), 
X W-v,c {rO -)■ t)$d' LI and d sg a o d t (0 < i < m), one has ((f(t n )9 ->■ 
t)$d <= LL) G X. 

2. A qc-interpretation X is a model of V (in symbols, X \=t>,C V) iff X is a 
model of every program rule belonging to V . 

3. A qc-statement p is a semantic consequence of V (in symbols, V \=v.c f) 
iffX W^v.c P holds for every qc-interpretation X such that X \=v,c V . □ 

3.2 Least Models 

We will now present two different characterizations for the least model of a given 
program V: in the first place as a least fixpoint of an interpretation transformer 
and in the second place as the set of qc-facts derivable from V in a special 
rewriting logic. 

A fixpoint characterization of least models. 

A well-known way of characterizing least program models is to exploit the lattice 
structure of the family of all program interpretations to obtain the least model of 
a given program V as the least fixpoint of an interpretation transformer related 
to V . Such characterizations are know for logic programming |ll|2j . constraint 
logic programming 7 6 10 , constraint functional logic programming [13 and 



( [u -» flgdj <= n ) <=1 ,„ 
(f(t n ) -> t)u <= n 



n 



QDF X using p' = (f(t' n ) -»• t)W <= LL) G X 



4 Weak models and weak semantic consequence could be also denned similarly as in 
[13] . but strong semantics suffices for the purposes of this report. 
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qualified logic programming [19]. Our approach here extends that in [13] by 
adding qualification values. 

The next result, whose easy proof is omitted, provides a lattice structure of 
program interpretations: 

Proposition 2 (Interpretations Lattice). Intx>,c defined as the set of all qc- 

interpretations over the qualification domain T> and the constraint domain C is 
a complete lattice w.r.t. the set inclusion ordering (C.). Moreover, the bottom 
element _LL and the top element TT of this lattice are characterized as _LL = 
cfo.cd^ \ is a trivial qc-fact}) and TT — {ip \ ip is any qc-fact}. 

Now we define an interpretations transformer STp intended to formalize the 
computation of immediate consequences from the qc-facts belonging to a given 
qc- interpretation. 

Definition 8 (Interpretations transformers). Assuming a QCFLP(V,C)- 
program V and a qc-interpretation X, STp : Int-p.c Int-pg * s defined as 
STp(I) =def ch>,c{p re ST-p{I)) where the closure operator clx>,c * s defined as 
in Def. [3] and the auxiliary interpretation pre-transformer preSTp acts as fol- 
lows: 

preST v (l) = dcf {(f(t n )9 -> t)$d <= 77 | there are 
some (f(t n ) 4r^= 5 m ) £ V, 
some substitution 9, 

some set IT of primitive atomic C-constraints , 
some c-term t £ Termx(E,B,Var), and 

some qualification values do, d\, . . . , d m € D-p \ {b} such that 

- 1 H- P)C SiOWi <S= II (1 < i < m), 
2 H-p,c {rO -> t)$d <= II, and 

- d^aodi (0 < i < m) 

}• 

Proposition[3] below shows that preSTp(I) is closed under (V, C)-entailment. 
Its proof relies on the next technical, but easy result: 

Lemma 2 (Auxiliary Result). Given terms t,t' G Term±(S, B,Var) and a 
substitution rj such that t is linear and tr\ \—t' , there is some substitution rf such 
that: 

1. trj = t' , 

2. -n^n' (i.e. Xr] C X r( for all X E Var) , and 

3. n = r[ [\var(t)\ . 

Proof. Since t is linear, for each variable X occurring in t there is one single 
position p such that X occurs in t at position p. Let px be this position. Since 
t6 \— t' , there must be a subterm t' x occurring in t' at position px such that 
Xr/ □ t' x . Let rj' be a substitution such that Xrj' = t' x for each variable X 
occurring in t, and Yrj' = Y9 for each variable Y not occurring in t. It is easy 
to check that rj' has all the desired properties. □ 
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Proposition 3 (preST-p(X) is closed under (£>, C)-entailment). Assume 
two qc-facts ip and ip' . If ip ^ preST-p(X) and ip )pv,c <p' ' > then ip' G preST-p(X). 

Proof. Since ip G preST-p(X), there are some Ri : (f(t n ) — > f <5 m ) G V and 
some substitution 9 such that tp : (f(t n )6 — > t)$d <= 77 and 

- (i) x Vrvfi 6ie$di <= n (1 < i < m) , 

- (2) X H-p^c {r9 -> f)|jd ^ 77 , and 

- (3) d «3 a'odj (0 < i < m) . 

Since <p ^v,C <p' , we can assume ip' : (f(t' n ) — > t')$d' <= TV and a substitution 
a such that tja C f ■ (1 < i < n), ier □ f , (4) d ^ d' and 77' He Tier. 

Given that £„ is a linear tuple of terms, and applying Lemma [2] with rj = 9o~, 
we obtain a substitution rj' satisfying tin 1 = t\ (1 < i < n), #er C r/ and 
0<T = 7/ [\var(t n )]. Now, in order to prove tp' G preST-p(X) it suffices to consider 
i?,;, ?/ and some some d' , d[, . . . , d' m G 7>£> \ {b} satisfying: 

- (1') 1 ^v,c WK ^ //' (1 < i < m) , 

- (2') I H-!, jC (n/ -> t')ttrfd . and 

- (3') d! S3 a o d' ( (0 < i < m) . 

Let us see that (f), (2') and (3') hold when choosing d\ = dk (0 < i < m): 

[V] For any 1 < i < m we have SiOftck <= TI ^v,c <Wlt^ •<= TV using a, because 
5i9a C Sirf, di ^ rfj and TI 1 He Therefore (1) (f) by the entailment 
property (Lemma [3[3])). 

[2'] Similarly as for (f), (r6 ->■ t)jjd # ^P,C (r0' i')tt rf oM using a, 

because r9a C rr/, tcr 3 i'j ^ and 77' He Tier. Therefore (2) =>■ (2') again 
by the entailment property (Lemma ITj[3"]) ) . 

[3'] From (3) and (4) we trivially get d! ^ a o d, (0 < i < m). Therefore, (3') 
holds when choosing = di (0 < i < m). □ 

As a consequence of the previous proposition, we can establish a stronger 
relation between ST-p(X) and preST-p(X) for non-trivial qc-facts, as given in the 
following lemma. 

Lemma 3 (ST-p(X) versus preST-p(X)). For any non-trivial qc-fact ip one has: 
tp G ST-p (I) => tp g preSTp(X). 

Proof. From ip G ST V (X) it follows by definition of ST V that ip G c\ vfi {preST v (X)) 
As we are assuming that tp is not trivial, there must be some ip S preSTpiX) 
such that -0 !f=x>,c ¥>• Then 93 G preSTp(X) follows from Proposition [3J □ 

The main properties of the interpretation transformer STp are given in the 
following proposition. 

Proposition 4 (Properties of interpretation transformers). Let V be a 

QCFLP(T>, C) -program. Then: 



1. ST-p is monotonic and continuous. 
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2. For any X G Int vfi : X \=v,c V ^=> ST V {X) C X . 

Proof. Monotonicity and continuity arc well-known results for similar semantics; 
see e.g. Prop. 3 in [13] , Item 2 can be proved as follows: as an easy consequence 
of Def. El X hx>,c V ' <S=> preST v {l) C X. Moreover, preST v (X) CI ^ 
dv,c(p r sST-p(I)) C cl-p.c(^) ST-p(I) C X, where the first equivalence is 

obvious and the second equivalence is due to the equalities clx> fi{p r ^ST-p{X)) = 
ST V {X) and c\ vfi {I) = 2T. Therefore, X ^ vfi V ^> ST V {X) C X, as desired. 

□ 

Finally, we can conclude that the least fixpoint of ST-p characterizes the least 
model of any given QCFLP(£>, C)-program V, as stated in the following theorem. 

Theorem 1. For every QCFLP(T>,C)-program V there exists the least model 
S v = lfp{ST v ) = [j km ST v t{AL). 

Proof. Due to a well-known theorem by Knaster and Tarski [22 , a monotonic 
mapping from a complete lattice into itself always has a least fixpoint which 
is also its least pre-fixpoint. In the case that the mapping is continuous, its 
least fixpoint can be characterized as the lub of the sequence of lattice elements 
obtained by reiterated application of the mapping to the bottom element. Com- 
bining these results with Prop. H trivially proves the theorem. □ 

A qualified constraint rewriting logic. 

In order to obtain a logical view of program semantics and an alternative charac- 
terization of least program models, we define the Qualified Constrained Rewrit- 
ing Logic for Programs QCRWL(2?, C) as the formal system consisting of the 
six inference rules displayed in Fig. |3] Note that QCRWL(£>,C) is very simi- 
lar Qualified Constrained Rewriting Logic for Interpretations I-QCRWL(D, C) 
(see Fig. [5]), except that the inference rule QDFj from I-QCRWL(D, C) is re- 
placed by the inference rule QDFp in QCRWL(£>,C). The inference rules in 
QCRWL(£>,C) formalize provability of qc-statements from a given program V 
according to their intuitive meanings. In particular, QDFp formalizes the be- 
havior of program rules and attenuation factors that was informally explained 
in the Introduction, using the set [P]± of program rule instances. 

In the sequel we use the notation V \--p.c V to indicate that ip can be inferred 
from V in QCRWL(2?, C). By convention, we agree that no other inference rule 
is used whenever QTI is applicable. Therefore, trivial qc-statements can only 
be inferred by rule QTI. As usual in formal inference systems, QCRWL(£>,C) 
proofs can be represented as trees whose nodes correspond to inference steps. 
For example, if V is the library program, 77 is empty, and ip is 



(guessGenre(book(4, "Beim Hauten der Zwiebel" , "Gunter Grass", 
"German" , "Biography" , medium, 432)) — > "Essay")#0.7 
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if ip is a trivial qc-statement. 

<P 

— if v £ Var U Be and d £ Dt> \ {b}. 

[v -t v)$d <= n 

( (e, -» tQftd, j= 77 )j= 1 ... n if c £ DC" 1 and d £ Dz, \ {b} 
(c(e„) ->■ c(i„))ttd •$= 77 verifies d < dj (1 < i < n). 

( (e 8 -j-tQlR ^77 (r ^ i)^ ^ 77 fejd^TTjj^, 

(/(e„) ->t)«d^ 77 

if / £ 73F™ and (/(!„) A- r <= 5i, . . . , S m ) £ [P]± 

where [P]± = {Ri8 \ Ri is a rule in P and 8 is a substitution}, 

and d £ 7)x> \ {b} verifies d ^1 di (1 < i < n), d a o dj (0 < j < m). 

QPF ( x... n if 6PF n eVhrU£)C o uB 

(p(e») ->■ v)$d <= 77 

77 he p(tn) — > i> and d £ D-d \ {b} verifies d ^1 d; (1 < i < n). 

QAC ( (e< ~> tOg* ifpG p F ", w eVhrUZ3C°UB Cl 

(p{e„) == ujttd <^ 77 

77 |=c p(t n ) == v and d £ Dt> \ {b} verifies d $3 di (1 < i < n). 



Fig. 3. Qualified Constrained Rewriting Logic for Programs 



QTI 
QRR 

QDC 



then V ^u,K ip TI with a proof tree whose root inference may be chosen as 
QDF-p using a suitable instance of the fourth program rule for guessGenre. 

The following lemma states the main properties of QCRWL(£>, C). The proof 
is similar to that of Lemma [T] and omitted here. The interested reader is also 
referred to the proof of Lemma 2 in [TJ] . 

Lemma 4 (Some properties of QCRWL(2?, C)). The three first items of 
Lemma[l\ also hold for QCRWL(T>,C), with the natural reformulation of their 
statements. More precisely: 

1. Approximation property: For any non-trivial if of the form (t —¥ t')$d <= U 
where t,t' G Term B, Var), the three following affirmations are equiva- 
lent: (a) t □ tf ; (b) V \~t> e V with an easy proof tree; and (c) V \~t>.c f- 

2. Primitive c-atoms: For any primitive c-atom p(t n ) == v, one has V \~t>,C 
(p(t n ) == v)$d <= II 77 he P(t n ) == v. 

3. Entailment property: V \~t>,c <P with a proof tree T and ip ^=t>,c f' == ^ 
V \~v.c f 1 with a proof tree T' such that |T'| < \T\- 

The next theorem is the main result in this section. It provides a nice equiva- 
lence between QCRWL(X>, C)-derivability and semantic consequence in the sense 
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of Definition[7] (soundness and completeness properties), as well as a characteriza- 
tion of least program models in terms of QCRWL(2?, C)-derivability (canonicity 
property) . 

Theorem 2 (QCRWL(Z), C) characterizes program semantics). For any 

QCFLP(T>,C)-programV and any qc- statement ip, the following three conditions 
are equivalent: 

(a) V \-t>,c V (b) V \=t>,c V ( c ) Sv <P 

Moreover, we also have: 

1. Soundness: for any qc-statement if, V \~t>,c P> =^ T 3 \=v.c t P- 

2. Completeness: for any qc-statement ip, V \=v,c <P =^ ~P \~v,c ^P- 

3. Canonicity: Sp = {ip \ ip is a qc-fact and V \~v,C <p}- 

Proof. Assuming the equivalence between (a), (b) and (c), soundness and com- 
pleteness are a trivial consequence of the equivalence between (a) and (6), and 
canonicity holds because of the equivalences <p g S-p Sp ^rv.c <-P 

P \~v,c which follow from the conservation property from Lemma Q] and the 
equivalence between (c) and (a). The rest of the proof consists of separate proofs 
for the three implications (a) => (b), (b) => (c) and (c) => (a). 

[(a) => (6)] We assume (a), i.e., V ^v,c <P with a QCRWL(£>,C)-proof tree 
Tp including k > 1 QCRWL(2?, (^-inference steps. In order to prove (b) we also 
assume a qc-interpretation X such that X \=z>,e *P ■ We must prove X H~x>,c <p with 
some QCRWL(X>, C)-proof tree 7z- This follows easily by induction on k, using 
the fact that each QCRWL(2?, C)-inference rule QRL is sound in the following 
sense: each inference step 

^ QRL 

<P 

verifying X W~t>,c V?i (1 < * < "■) (i-e., the premises are valid in X) also verifies 
X Vrv.c f (i-e., the conclusion is valid in X). For QRL other than QDF-p, 
soundness of QRL does not depend on the assumption X \=x>.c "P; it can be 
easily proved by using the homonomous I-QCRWL(£>, C)-inference rule QRL. 
In the case of QDF-p, ip has the form f(e n ) —> t)$d <= II and the validity of the 
premises in X means the following: 

- (1) X Vr Vfi (e t -y ti)Ui <= n (1 < i < n) , 

- (2) X Yr v .c (r t)$d' <= n , and 

- (3) x t^ c 5 w 3 <=n (1 < i < m) 

with / g DF n , (f(t n ) 2> r <=8 1} --- ,S m ) g fP]x, d «3 dj (1 < t < n) and 
^ a o d J (0 < j < m). Then, from the assumption X \=t>,c V and Def. [Jjwe 
obtain 



- (4) ((/(!„) -> ^n)ex. 
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Finally, from (1), (4) we conclude that (/(e„) — > t)$d <= II can de derived by 
means of a QDFj-mference step from premises (e^ — > ti)$di II (1 < i < n). 
Therefore, I W~t>,c (/(e«) — > t)$d <J= 77, as desired. 
[(b) (c)] Straightforward, given that Sp \=v,c V, as proved in Th. Q] 

[(c) (a)] Let (p be any c-statement and assume Sp H-p.c <P with proof tree 
T ■ Note that T includes a finite number of QDFj-inference steps with X = S-p, 
relying on finitely many qc-facts ipi € Sp (1 < i < p). As Sp — UfceN STp"[ k (_LL) 
because of Th. [TJ there must exist some k £ N such that all the (1 < i < f>) 
belong to STp t fe (JL) and thus STp t fc ( JL) H-d.c f. Therefore, it is enough to 
prove by induction on k that 

STpf (Jl) H p , c p 7? h p , c p 

Basts (fc=0). Assume STpf (JL) ^~v,C <P with Z-QCRWL(£>, C)-proof tree 7~. 
As STp f° (Jl) = Jl, which only includes trivial qc-facts and QDFj always 
uses non-trivial qc-facts, T cannot include QDFx-inference steps. Hence, T also 
serves as a QCRWL(7?, C)-proof tree which includes no QDF-p-inference steps 
and proves ST-pf (Jl) ^v,c <P- 

Inductive step (k>0). Assume STp t fc+1 (Jl) W~v,c f with I-QCRWL(D, C)- 
proof tree T '. Then V \~v,c <-P can be proved by an auxiliary induction on the size 
of 7~, measured as its number of nodes. The reasoning must distinguish six cases, 
according to the I-QCRWL(X>, C)-inference rule QRL used to infer ip at the root 
of T. Here we present only the most interesting case, when QRL is QDFj. In 
this case, cp is a non-trivial qc-statement of the form (/(e„) — > t)$d <= II, and T 
has the form 

( (ej -> ti)$di <= 77 ) i=1 ... n 
V :{f{e n )^t)W^n 1 

with non-trivial -0 : ((/(i„) -> t)$d <= 77) G STp^ k+1 (Jl), d «3 d l (0 < i < n), 
and STpt k+1 (Jl) W~ vfi (ei -> U)$di 77 proved by Z-QCRWL(2?, C)-proof 
trees % wit sizes smaller than the size of T (1 < i < n). Therefore, the inductive 
hypothesis of the nested induction guarantees 

- (1) V ^v,c (e l ->• *i)t)rf, <= 77 with QCRWL(7?, C)-proof trees % (1 < i < n) 

On the other hand, Lemma [3] ensures t/j e preSTp(ST v t fc (JL)). Therefore, 
recalling Def. El there must exist f(s n ) —> r <= 5 m e V, a substitution 9 and 
qualification values d' , d[, . . . , d' m satisfying S{d = U (1 < i < n) and 

- (2) STpf (Jl) \h v . c SjBU'j <= n (1 < j < m) 

- (3) STpt (Jl) H-^c ->• i)K <= iT 

- (4) d ^ a o d£ (0 < j < m) 

By the inductive hypothesis of the main induction, applied to (2) and (3), we 
get: 

- (5) V V Vfi SjOWj <= n with QCRWL(2?,C)-proof trees f'j (1 < j < m) 



A Generic Scheme for QCFLP 21 

- (6) V V vfi (r0 -> n with QCRWL(2?,C)-proof tree V 
From d ^ di (0 < i < n) and (4) we also obtain: 

- (7) d ^ di (0 < z < n), d sg a o (0 < j < m) 

Finally, we can prove V \~v,c <P with a QCRWL(2?, C)-proof tree T of the form: 

{{fii -» ^ 77) t=1 ...„ (rfl i7 (gj-gftrfj- ^ n) j=1 ... m 

V : (/(e„) t)U ^77 ^ v 

using the program rule instance (f(s n ) — > r <= S m )9 & [P]±, where (5) and 
(6) provide proof trees for deriving the premises and (7) ensures the additional 
conditions required by the QDFp inference at the root of T. □ 

3.3 Goals and their Solutions 

In all declarative programming paradigms, programs are generally used by plac- 
ing goals and computing answers for them. In this brief subsection we define 
the syntax of QCFLP(Z), C)-goals and we give a declarative characterization of 
goal solutions, based on the QCRWL(2?,C) logic. This will allow formal proofs 
of correctness for the goal solving methods presented in Section 21 

Definition 9 (QCFLP (£>, C)-Goals and their Solutions). Assume a a count- 
able set War of so-called qualification variables W , disjoint from Var and C 's 
signature S, and a QCFLP(T>,C)-program V . Then: 

1. A goal G for V has the form S^W U . . . , 8 m Wm D Wi &Pi,...,W m m , 
abbreviated as ( (JittWi, Wi^/3i )j=i... m , where SjftWj (1 < j < m) are 
atomic C-constraints annotated with different qualification variables Wi, and 
Wi ^ Pi are so-called threshold conditions, with /3j € D-p \ {b} (1 < i < m). 

2. A solution for G is any triple (a, p,, 77) such that a is a substitution, fi is 
a T> '-valuation, II is a finite set of atomic primitive C-constraints, and the 
following two conditions hold for all 1 < i < m: Wifi — di ^ /3,-, and 
T- 5 \~v,c (8iO~)$di <= 77. The set of all solutions for G is noted Sol-p(G). □ 

Thanks to the Canonicity property of Theorem [2j solutions of V are valid 
in the least model S-p and hence in all models of V . A goal for the library 
program and one solution for it have been presented in the Introduction. In this 
particular example, 77 = and the QCRWL(Zi, 1Z) proof needed to check the 
solution according to Definition [5] can be formalized by following the intuitive 
ideas sketched in the Introduction. 

4 Implementation by Program Transformation 



Goal solving in instances of the CFLP(C) scheme from [13] has been formalized 
by means of constrained narrowing procedures as e.g. |12|5j . and is supported 
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by systems such as Curry [9] and TOy [3j. In this section we present a semanti- 
cally correct transformation from QCFLP(£>,C) into the first-order fragment of 
CFLP(C) which can be used for implementing goal solving in QCFLP(£>, C). 

By abuse of notation, the first-order fragment of the CFLP(C) scheme will be 
noted simply as CFLP(C) in the sequel. A formal description of CFLP(C) can be 
found in |13j ; it is easily derived from the previous Section [3] by simply omitting 
everything related to qualification domains and values. Programs V are sets of 
program rules of the form /(t„) — > r <= A, with no attenuation factors attached. 
Program semantics relies on inference mechanisms for deriving c-staments from 
programs. In analogy to Def. |4j a c-statement ip may be a c-production e — > 
t <= II or a c-atom 5 4= II. In analogy to Def. [51 c-interpretations are defined as 
sets of c-statements closed under a C-entailment relation. Program models and 
semantic consequence are defined similarly as in Def. [7J Results similar to Th. 
[1] and Th. [2] can be obtained to characterize program semantics in terms of an 
interpretation transformer and a rewriting logic CRWL(C), respectively. 

For the purposes of this section it is enough to focus on CRWL(C), which is 
a formal system consisting of the six inference rules displayed in Fig. [U They 
are quite similar to the QCRWL(Z), C)-infcrcncc rules from Fig. [31 except that 
attenuation factors and qualification values are absent. 



TI if if is a trivial c-statement. 

<P 

RR if veVarU B c . 

v — > v n 

DC ( ei -* U<=n ) i=1 ... n ifcGiX7 n 
c(e„) -> c(t n ) <= n 

DF ( e t ->■ U -4= II )j=i,.,„ r^-t^II i 'V, < // ;, i 

V f(e n ) -^t^n 

if / e DF n and (f(t n ) A- r <= Sx, . . . , * m ) e [P]± 

where [P]± = {Ri6 | i?z is a rule in V and 9 is a substitution}. 

pF (ei-+ti<=II )j=i.,. n if p S PF n , v€ Var U DC U B c 
p(e n ) — > v <= II and 77 (=c p(t„) — > v. 

ei^U^n )i=i...„ if p e PF n , veVarU DC U B c 



AC 



p(e„) == v <= 77 and 77 \= c p(t n ) == 



Fig. 4. First Order Constrained Rewriting Logic 



The notation V \~c <p indicates that ip can be inferred from V in CRWL(C). 
In analogy to the Canonicity Property from Th. [21 it is possible to prove that 
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the least model of V w.r.t. set inclusion can be characterized as S-p — {ip 
if is a c-fact and V \~c <^}. Therefore, working with formal inference in the rewrite 
logics QCRWL(£>,C) and CRWL(C) is sufficient for proving the semantic cor- 
rectness of the transformations presented in the rest of this section. 

The following definition is similar to Def. [9] It will be useful for proving the 
correctness of the goal solving procedure for QCFLP(2>, C)-goals discussed in 
the final part of this section. 

Definition 10 (CFLP(C)-Goals and their Solutions). Assume a CFLP(C)- 
program V . Then: 

1. A goal G for V has the form Si, . . . , S m where Sj are atomic C -constraints. 

2. A solution for G is any pair (a, 77) such that a is a substitution, II is a 
finite set of atomic primitive C- constraints, and V he Sja 4= U holds for 
1 < j < m. The set of all solutions for G is noted Sol-p(G). □ 

Now we are ready to describe a semantically correct transformation from 
QCFLP(2?, C) into CFLP(C). The transformation goes from a source signature 
£ into a target signature £' such that each / £ DF n in S becomes /' £ 
DF n+1 in £' , and all the other symbols in £ remain the same in £' . There 
are four group of transformation rules displayed in Figure [5] and designed to 
transform expressions, qc-statements, program rules and goals, respectively. The 
transformation works by introducing fresh qualification variables W to represent 
the qualification values attached to the results of calls to defined functions, as 
well as qualification constraints to be imposed on the values of qualification 
variables. Let us comment the four groups of rules in order. 

Transforming any expression e yields a triple e T = (e', ft, W), where fl is a set 
of qualification constraints and W is the set of qualification variables occurring 
in e' at outermost positions. This set is relevant because the qualification value 
attached to e cannot exceed the infimum in V of the values of the variables W £ 
W, and is computed by recursion on e's syntactic structure as specified by 
the transformation rules TAE, TCEi and TCE 2 . Note that TCE 2 introduces 
a new qualification variable W for each call to a defined function / £ DF n and 
builds a set Q' of qualification constraints ensuring that W must be interpreted 
as a qualification value not greater than the qualification values attached to /'s 
arguments. TCEi deals with calls to constructors and primitive functions just 
by collecting information from the arguments, and TAE is self-explanatory. 

Unconditional productions and atomic constraints are transformed by means 
of TP and TA, respectively, relying on the transformation of expressions in the 
obvious way. Relying on TP and TA, TCS transforms any qc-statement of the 
form ijjftd <= 77 into a c-statement whose conditional part includes, in addition 
to 7J, the qualification constraints Q coming from if 1 ' and extra qualification 
constraints ensuring that d is not greater than allowed by ?/>'s qualification. 

Program rules are transformed by TPR. Transforming the left-hand side 
f(t n ) introduces a fresh symbol /' £ DF n+1 and a fresh qualification variable 
W . The transformed right-hand side r' comes from r 7 ", and the transformed 
conditions are obtained from the constraints coming from r^~ and 5^(1 < i < m) 
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Transforming Expressions 

TAE — = . -r HveVarUBc- 

vT = (v,0,0) 

TCEi ( ei r = (e<,J?j,Wi) )^i...n . f n pF „ 

/i(e„) r = (h(e' n ), Ur=i «i, U?=i WO 

TCEa (Ci r = (c<,l2 i> Wi) )i=l...n 



/(en) T = {}'(e' n ,W),Q',{W}) 



if / 6 DF" and W is a fresh variable, 

where Q' = (U"=i ^0 U {qVal(W)} U { r W S3 W'^ \ W € U?=i Wi}- 



Transforming qc-Statements 

e r = (e', fl, W) 



TP 



(e^i) r = (e'->-t, 12, W) 



TA ( e i r = (^,fi j ,W i ) )i=i...„ 



( P (e„) == = ( p( C '„) == «, ur=i «i, UT=i Wi ) 

if p € PF n , u € Var U DC U B c . 

t/) r = (V>', fi, W) 



TCS 



(VHrf n) r = (ip 1 n,nu { r d < w n | w e w})) 



if i/> is of the form e — > i or p(e n ) == v and d € D-d. 



Transforming Program Rules 

r T = (r', a, W r ) ( & r = {SI, ft, Wi) ) i= i. 



TPR 



(f(tn) 

f'(tn,W)->r' *=qVal(W), Or, { r W S3 a o r>/ 6Wp , 

( f2i, ( r f^or>. £Wll *i )i=l...r 

where W is a fresh variable. 



Transforming Goals 



((JiltWi.Wi^/Si ) i= i... m ) r = 



( ^, qVal(Wi), ( r Wi «3 W'^) w , ew ,, ^Wi t> pp, Si )<=!. 



Fig. 5. Transformation rales 
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by adding extra qualification constraints to be imposed on W, namely q\/a\(W) 
and ( r W sg a o W n ) W 'eW, for W = W r and W = Wi (1 < i < m). By 
convention, ( r W ^ a o W'~ l )w'eW' i s understood as r W ^ a n in case that 
W' = 0. The idea is that W's value cannot exceed the infimum in V of all 
the values a o j3, for the different /3 coming from the qualifications of r and Si 
(1 < i < m). 

Finally, TG transforms a goal ( S^Wi, Wi ^ )»=i...m by transforming each 
atomic constraint <5i and adding qVal(Wj), ( r Wi $3 W /_1 )w' e w? and r Wi ^ ft -1 
(1 < i < m) to ensure that each Wi is interpreted as a qualification value 
not bigger than the qualification computed for Si and satisfying the threshold 
condition Wi ^ Pi. In case that W- = 0, ( r Wi ^ W /_l )w'e>v; is understood as 
r W t sg t n . 

The result of applying TPR to all the program rules of a program V will 
be noted as V 7 . The following theorem proves that QCRWL(2?, C)-derivability 
from T 7 corresponds to CRWL(C)-derivability from P 7 ". Since program semantics 
in QCFLP(2?,C) and in CFLP(C) is characterized by, respectively, derivability 
in QCRWL(2?, C) and in CRWL(C), the program transformation is semantically 
correct. The theorem uses an auxiliary lemma we are proving first which indicates 
that the constraints obtained when transforming a qc-statement always admit a 
solution. 

Lemma 5. Let tp = ip$d <= LI be a qc-statement such that (p 7 = (ip' II, fl'). 
Then exists p : var(fl') — > D-p \ {b} solution of fl'. 

Proof. pf r is obtained by the transformation rule TCS of Figure [5j This rule 
needs to obtain which can be done using either the transformation rule TP 
or TA of the same figure. In the case of using TP, ip must be of the form 
(e -> t) and fl' will be of the form fl U { r d «3 W n \ W G W}, with f2,W 
such that e 7 — [e! , fl, W). Checking the transformation rules for expressions 
(again Figure [5]) we see that fl is a set of constraints where each element is 
either of the form r W sg W n or qVal(W), with W, W' G War. Then p can be 
defined assigning t to every variable W occurring in either fl' or W. The case 
corresponding to the transformation rule TA is analogous. □ 

Theorem 3. Let V be a QCFLP(T>,C)-program and ififtd <= LI a qc-statement 
such that (ipftd <= LI) = (ip 1 -<= 77, fl'). Then the two following statements are 
equivalent: 

1- V V vfi i/4d <(= 77. 

2. V 7 ^ he ip'p <= LI for some p G Solc(fl') such that vdom(p) = var( fl'). 

Proof. We prove the equivalence separately proving each implication. 
[TJ => [2j] (Transformation completeness). Assume V \~t>,c ip$d 77 by means 
of a QCRWL(2?, C) proof tree T with k nodes. By induction on k we show the 
existence of a CRWL(C) proof tree T 1 witnessing V 1 ' \~c ^P'p <= LI for some 
p G Solc(^2') such that vdom(p) = var(J?'). 

Basis (k—1). If T contains only one node the QCRWL(2?, C) inference step ap- 
plied at the root must be one of the following: 
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— QTI. In this case ip$d •<= 77 is a trivial qc-statement, and we take p as the 
substitution defined in Lemma O By Def. |4j ip$d ^= U trivial implies either 
ip = e — > _L or Unsafe (77). In the first case i/i' — e! — > _L and therefore 
ip'p ^ II is trivial. Analogously, if Unsate(77) then ijj'p <£= 77 is trivial as 
well. Hence T' consists of a single node ip'p 77 with a TI inference step 
at its root. 

>-F~ 

— QRR. In this case ip = t — > t for some £ G Var U £>c, and (^tt^ H) — 
(t -> < «= 77, 0) (applying the transformation rules TCS, TP and TAE to 
obtain i r = (t, 0, 0)). Therefore p can be defined as the identity substitution 
and prove V T h c t/j'p <= 77 by using a single RR inference step. 

— QDC. In this case ip = c — y c and <S= 77) T = (c ->• c 4= 77, 0) (applying 
the transformation rules TCS, TP and TCEi for c r = (c, 0, 0)). Therefore 
p can be defined as the identity substitution and prove \~c ip'p 77 by 
using a single DC inference step. 

Inductive step (fc>l). The QCRWL(X>,C) inference step applied at the root must 
be one of the following: 

— QDC. In this case ip = c(e„) — >• c(t n ) and the first inference step is of the 
form 

( -» tjjjdj <= 77 ). t ^i...» 
(c(e„) -> c(i„))tfd 4= 77 

with d ^ (1 < i < n). In order to obtain ipftd <= lf r we apply the 
transformation rules as follows: 

• By the transformation rule TCEi, 

n n 

c(e„) T = (c(^„), (J f2j, |J W<) 

i=l i=l 

with ei T = (ej, filj, Wj) for i = 1 . . . n. 

• By TP and with the result of the previous step, 

n n 

V = (c(e n ) -y c(t„)) T = (c(? n ) ->■ c(i n ), (J ^ U W *) • 

i=l i=l 

• And finally from V? 7 " and by TCS, 

md 4= nf = (c(7 n ) -> c(t„) <= 77, fl 7 ) , 

with 

n n 

I?' = Q «j u { r d sg VK n | w e (J Wi} . 

i=l i=l 

From the premises ( (e, — > •<= 77 )i=i... n of the QDC step and by the 

induction hypothesis we have that he {e[ — ¥ ti)pi <= II, i = 1 . . . n for 
some substitutions pt : var(i7Q — > Dx> \ {b} solution of 



Q[ = QiU { r d t sg W n | W G Wi} 
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for j = l...n. Since var(i?-) n var(i?j) = for every 1 < i, j < n, i ^ j, 
and var(J7') = 1J™ =1 var(i?-), we can define a new substitution p : var(/?') — > 
7?r> \ {b} as p = 1+)™ =1 Pi- It is easy to check that p is solution of Q'\ 

• It is solution of every i?- for i = 1 . . . n, since pfvar(J7-) = p^. Therefore 
it is solution of U"=i 

• It is a solution of { r d ^ VF n | hy £ U™=iW«} because as solution of 
Q[ for i = 1 . . .n, p is solution of { r d; ^ VK" 1 | G WJ, and by the 
hypothesis of QDC d ^ d,. 

Therefore we prove P 7 " he (c(e' n )p — > c(t n ))p 4= 77 with a proof tree T" 
which starts with a DC inference rule of the form 

(( e'j -> ^)p ^ n )»=i„. n 
{c(e! n ) -)■ c(£ n ))p 4= 77 

In order to justify that V r he (e^ — > t{)p <*= 77 for each i = 1 . . . n, we 
observe that the only variables of e • — > ij that can be affected by p are those 
introduced in e- by the transformation, and that therefore (e\ — \ U)p = 
(e\ — > ti)pi for i = l...n, and these premises correspond to the inductive 
hypotheses of this case. 
— QDFp. In this case tp = /(e„) — > t and the inference step applied at the 
root is of the form 

( jet -> ue^dj ^ 77 ) i=1 ,„ n (rfl -> t)K) 4= 77 ( <5 3 ^ 77 ) 3 - =1 ,„ m 

(/(e„) -)• *)ttrf i7 

for some program rule Ri — (f(t n ) r <= S m ) £ V and substitution 9 such 
that Ri6 £ [P}±, and with d ^ di (1 < i < n) and d^aod'^ (0 < j < m). 
The inductive hypotheses in this case are: 

1. V r h c (e- ->■ i;0)pi <J= 77 for i = 1 . . .n, with e; r = (e-, J?i, Wi) and p; 
solution of fl[ = Qi U { r d t sg VK' n | £ W 4 }, for * = 1 ... n. 

2. 7> r h c (r'9 f)p£, 4= 77, with r r = (r', f2 r , W ) (it is easy to check that 
if r T = (r 1 , Q r , W ) then (r<9) T = (r'6, Q r , W ) for every substitution 9), 
and p[, solution of Q' r = Q r U { r d[, ^] | W € Wq}- 

3. 7> r h c (^6»)p;. 77 with Sj T = (S'j,^ , Wj) for j = 1 . . . k (it is easy 

to check that if 8j T = then (^6») r = (8^9, Q 5j , Wj) for 

every substitution and 7 = 1 . . . k). The substitution p^ is solution of 
Q> &j = Q Sj u { r d' 3 sg VK' n j W £ W'j } for j = 1 . . . m. 

In this case, (ipftd 4= 77) r is obtained by means of the transformation rule 
TCS. This rule asks first for the transformation of the qualified statement 
— > t)$d, which can be obtained by rule TP, and this one requires the 
transformation of /(e„), provided by rule rule TCE2. Let's sec it: 
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( ei r = (e^,^,>V 4 ) ) i=1 ...„ 
TCE 2 

/(e„) T = ( J@n,W), 

(Ur=i «i) U {qVal(W)} U 

{ r w «g w n | W g ur=i W ) 



(f(e n )^t) r = (f(e' n ,W)^t, 
(ULi «i) u {qVal(W)} U 
{ r VK «3 VK n | G |jr=i W J> W ) 



TP 



TCS 



((/(e„) t)(td 4= 77) r = ( /(e'„, W) -»■ * 4= 77, 
(Ur=i^)U{qVal(W)}U 

{ r vK «g | w e ur=i u { rd ) 

Therefore 

n n 

Q' = (|J U {qVal(W)} U { r W «3 W' n \ W G (J U { r d sg VT 1 } . 

i=l i=l 

We define a new substitution 

n m 

i=i j=i 

It is straightforward to check that p is a solution for W because p is solution 
of: 

• Each Qi (1 < i < n), because P i is solution of fl[ which contains J2j (see 
inductive hypothesis 1) and p is an extension of pi. 

• {qVa^W)} because q\/a\(W)p = qVal(rf) which holds by definition. 

• { r W S3 W' n | W G ljr=i Wi} because Wp = d, p is solution of { r ^ S3 
W' n | W' G Wi} for each i = 1 . . . n (see inductive hypothesis I), and 
d ^ di (1 < i < n) by the hypotheses of the inference rule QDPp. 

• { r d ^ T4 /n } since Wp = (i and trivially d ^ d. 

The transformed of the program rule Ri = (f(t n ) r <= 8 m ) G will be a 
program rule in 7^ of the form: 

(Ri) T = (f(t n , W)^r' 4= qVal(W), /2 r , (T^ao W^)^ eW - , 

n Sm ,{ r W ^aoW^) w , eW ,,5' m 
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with r r = (r' ; Si T , VK) and {5/ = {5' j ,Q 5j , Wj) ) j= i... m . 
Then we prove (f(e' n ,W) ->• i)p 4= 77 in CFLP(C) with a DF P root in- 
ference step using the program rule (7?;) and the substitution 8' = 9 W p 
to instantiate the program rule. We next check that every premise of this 
inference can be proven in CRWL(C): 

• V T h c (e-p -> ij(6> l+l p)) <= 77 for i = 1 . . . n. We observe that the only 
variables of e- that can be affected by p are those in pi. Moreover, p 
cannot affect ti because the program transformation does not introduce 
new variables in terms. Therefore (e^p — > U(9 l±J p)) = (e^ — > ti&)pi and 
P r l~c ( e i U9)Pi <= n for i = 1 . . . n follows from inductive hypothesis 
number 1. 

• V r h c (VKp W(0l±lp)) <= 77. By construction of p, (Wp W(0l±lp)) = 
<i — > <7 and one RR inference step proves this statement. 

• V r he (r'(# l+J p) — > tp) <= II. In this case tp = t because t it contains no 
variables introduced during the transformation, and r'(9 W p) = r'(9p' a ) 
since p' is the only part of p that can affect r' and the range of 9 
does not include any of the new variables in the domain of p' . Now, 
'P 1 ' he (r'9 — > t)p' <= II follows from inductive hypothesis number 2. 

• V r he q\/a\(W)(8 t±J p) <S= iT. hy is a fresh variable and, by construction 
of p, qVa\(W)(6 W p) = qVal(rf). 7> r h c qVal(rf) <i= 77 trivially holds. 

• V r he J3 r (# W p) 4= 77. J? r (0 l±l p) = J? r p = Sl r p' and, by construction, 
Pq is solution of fi r . 

• V r h c ( r W sg a o VK ,n )(6» W p) ^ 77 for each W € W . Wc have ( r W/ sg 
aoW' n )(9\Sp) = ( r W sg aoT4^ n )p = r Wp sg aoT^'p^ = r d sg aoVK'po n - 
And r d^ao Wpo" 1 holds because <7 sg a o d' by the hypotheses of the 
inference rule QDP-p, and r d' sg W 1 by inductive hypothesis number 
2. 

• V r he ^ (0 W p) <^= 77 for j — 1 . . . m. As in the previous premises 
Qs j (6 l±J p) = p = J?^ Pj- and p^- is solution of i?^ as a consequence of 
the inductive hypothesis number 3. 

• V r h c { r W sg a o Wj n )(0 W p) 4= 77 for every Wj e Wj and j = l...m. 
We have ( r W sg aoWp)(6\ttp) = ( r W sg aoWH)p = r Wp sg aoW/'p n = 
r d sg a o W'jp'p. Now, from the hypotheses of the inference rule QDPp 
follows d sg a o for j = 1 . . . m, and from inductive hypothesis number 
3, p'j is solution of r d , j sg Wp. Hence P r h c r rf^ao Wpp <= 77 for 
j = 1 . . . k. 

• V T he 5j(0\t)p) <= 77 for j = 1 ... m. In this case can contain variables 
from both 6> and pj. Hence ^(01+Jp) = (<^-0)p$. And V T h c (^p^- <s= 77 
follows from the inductive hypothesis number 3. 

- QPF. In this case tp — p(e n ) — > v and the inference step applied at the root 
is of the form 

( (g ->■ U)^dj <= 77 )j=i... n 
(p(e„) -»• w)Sd ^ 77 

with tieVarU 7JC° U B c , 77 h^ c -> v and d sg (1 < i < n). In order 

to obtain (^(JcZ 4= 77) one has to: 
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• First, apply the transformation rule TCEi, 

n n 
i=l i=l 

where ei T — {e[, W,) for i = 1 . . . n. 

• Second, apply the transformation rule TP, 

n n 

(p(e n ) -»■ vf = (p(? n ) -^v,\J f2 u |J Wi) . 

i=l i=l 

• And finally, apply the transformation rule TCS, 

n n 

md <= n f = ( P (F n ) -> v <= n, (J ^ u { r d ^ | vf e |J wj) . 

Therefore 

n n 

n' = \J Qi u { r d sg VF n | w g (J yvj . 

i=i j=i 

From the premises ( (ej — > i»)|tdi ^= )i=i...n of the inference rule QPF, and 
by the inductive hypothesis we have P 7 " he (e^ — > ti)/?j •<= 77 (1 < i < n) for 
some substitutions p^ : var(J? 4 ') — > D-p \ {b} solution of 

n[ = n t U { r d t ^ VF n | W E Wi} 

for i = 1 . . . n. We define a new substitution p : var(i?') — > D-p \ {b} as 
p = 1+J™ =1 Pi- It is easy to check that p is solution of J?': 

• It is solution of every Q[ for i = 1 . . .n, since pfvar (.(?■) = p^ Therefore 
it is solution of IJILi ^i- 

• It is a solution of { r d ^1 VF n | W <G U™=i^*} because as solution of 
f2< for i = 1 . . .n, p is solution of { r di ^ VF n | VF € and by the 
hypothesis of the inference rule QPF, d ^ di (1 <i < n). 

We now prove V r \~c {p(e'n) — > «)p ^7 with a proof tree T" with a PF 
root inference of the form: 

( (e'j ->■ U)p 4= 77 )^i,„» 
(p(e'n)p -> w) 4= 77 

The rule can be applied because the requirements w G Var U 7)C° U i?c 
and 77 \=c p(t n ) — > v are ensured by the hypothesis of the inference rule 
QPF. In order to justify that V r he (e- — > tj)p <= II for each i = l...n, 
we observe that the only variables of [e! i — > ti) that can be affected by p 
are those introduced in e- by the transformation, and that therefore (e ■ — > 
ti)p = (e- — >• U)pi for i = 1 . . . n, and it is easy to check that these premises 
correspond to the inductive hypotheses of this case. 
- QAC. This case is analogous to the previous proof, with the only differences 
being: 
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• The inference rule applied at the root of the proof tree is a QAC infer- 
ence rule instead of a QPF inference rule. 

• In order to obtain the (ip$d <= TI) 7 ' , the transformation rules applied are 
TA and TCS instead of TCEi, TP and TCS. 

• The proof tree T' will have an AC inference step at its root instead of 
a PF inference step. 

[2j =>[U] (Transformation soundness). Assume p € So\c{f2') such that vdom(p) = 
var(J?') and V 1 ' he ip' p -4= TI by means of a CRWL(C) proof tree T with k nodes. 
Reasoning by induction on k we show the existence of a QCRWL(D,C) proof 
tree T' witnessing V \~t>,c ip$d ■<= TI. 

Basis (k=l). If T contains only one node the QCRWL(2?,C) inference step ap- 
plied at the root must be any of the following: 

— TI. In this case ip'p <= II is a trivial c-statement. Then ip'p is either of 
the form e' — >• _!_ or Unsatc(i7). In the first case, since the transformation 
introduces no new variables at the right-hand side of a production, ip' is 
of the form e" — > _L with e' = e"p, and ip is of the form e — > _L, hence 
ip$d <= II is trivial. Analogously, if Unsatc(-ff) then ipftd •<= TI is trivial as 
well. Therefore T' consists of a single node ip$d -4= TI with d any value in 
D-p \ {b}, with a QTI inference step at its root. 

— RR. In this case ip'p = v — > v with v € Var U Be ■ Then ip' = v± — > vi for 
some Ui,«2 G Var U i?c such that ip'p = v — > v. Since ip' cannot contain new 
variables introduced by the transformation (by the transformation rules), 
this means ip'p = ip', and then ip' = v — > v. Therefore ip = v — > v, and T' 
consists of a single node containing (v — > u)(jd <= TI for any d £ Dx> \ {b} as 
the conclusion of a QRR inference step. 

— DC. Then ip'p = c — > c, which means that ip' can be either of the form c — > c, 
X — > c, or X — > Y with X, Y variables. In every case ip' does not include new 
variables introduced by the transformation, and therefore ip'p — ip' , which 
means that ip' — c — > c is the only possibility. Therefore ip = c — > c, and T" 
consists of a single node containing (c — > c)$d <= TI for some d £ Dxi \ {b} 
as the conclusion of a QDC inference step. 

Inductive step (fc>l). The CRWL(C) inference step applied at the root must be 
any of the following: 

— DC. Then ip'p — c(e"„) — > c(t n ) where c £ DC n and n > 0, which implies 
that ip = c(e n ) — )■ c(t„) for values ej verifying = (e^,J?i,Wj) for i 

1 ...//. and e" = e^p for i = 1 . . . n. Then 

n n 

^ T = (c(e„) -> c(i„)) T = (c(?„) -»• c(i„), |J fy, |J WO 

i=l i=l 

and thus <p = (c(e„) — > c(t n ))$d <= TI for some d 6 Dp \ {b} such that 
^ = (V/ iT, with 

n n 

n' = {J n t . u { r d ^ w~< \ w e [J wo 

t=l 8=1 
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The substitution p : var(f?') — > D-p \ {b} must be solution of Q' ', and the 
inference step at the root must be of the form: 

( e-p ->■ u <= n ) i= i...n 
c{e! n )p -> c(t n ) <= 77 

In the premises we have the proofs Tj of V r \~c e'iP II for i = 1 . . . n. Now, 
for each 1 < i < n we obtain a new value di G -D-p \ {b} as di — \~~\{Wp \ W G 
Wi}. Then we will prove V \~t>,c <P applying the following QDC inference 
step at the root: 

( (gj tj)Ui n ) i=1 ... n 

(c(e„) -»■ c(t„))(trf 77 

In order to ensure that this step must be applied we must check that d S3 
di (1 < i < n). This holds because p is solution of f2', in particular of 
{ r <7 S3 W 7 " 1 | W G Wi} for i = 1 . . . n. Therefore for each i — 1 . . . n and 
W G Wi, d s3 Wp, which means that d «3 = r~|{Wp | W G WJ. To 
complete the proof we must check that there are proof trees for the premises, 
i.e. that V \~t>,c Pi with ipi — (e^ — > tj)||dj -4= 77, i = l...n. This is a 
consequence of the inductive hypotheses since for each i = 1 . . . n: 

• Vl r = (e'i -> U <= 77, with ST. = Qi U { r d, s3 VK n | G WJ. 

• p is solution of since it is solution of Qi and by the definition of di, 
di ^ Wp for every W eWi. 

• We have that P r he e^p -4= 77 for i = 1 ... n (the premises of the DC 
step). 

— DF-p . The inference step at the root of T will use an instance (Ri r )6 G [P 7 '} _i_ 
of a program rule Ri 7 ^ of V T ' . Ri 7 will be the transformed of a program rule 
Ri = (f(tn) — > r <= 5 m ) G V, and therefore will have the form: 

Ri T = (/(*„, WO -> r' 4= qVal(W), Q r , ( r W sg a o W n V eW ,, 

with r r = (r', fi r , W£) and {Sj T = (5;., Wj )),=!... m- 
In this case, ip'p must be of the form (/(e'„ + i) — > t)p. By the theorem 
premises, there exists a qc-statement ^jjd •<= 77 such that (ipftd <= T7) 7 " = 
(?/>' <= 77, J?') for some J?'. Examining the transformation program rules we 
observe that the only possibility for ip is to be of the form f(e n ) — > t and 
that the TCS transformation rules should have been applied followed by TP 
and TCE2. This means in particular that d^b and that a 7 ' = (e-, J2j, Wi) 
for i = 1 . . . n and that e' n+1 = V with V fresh variable. Hence 

V = (fp n , v) -> t, ( ur=i AO u {qVal(y)}U 

{T S3 W n I 14" G ljr=i w 4> W) 
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and ip = (/(e„) — > t)$d 4= 77 for some d G Up \ {b}. By hypotheses, p is 
solution of 

n n 

ft' = ((J U {qVal(V)} U { r V sg W' n \ W e |J U { r d sg V n } 

»=i »=i 

which means, in particular, that Vp G Up \ {b}, since it must hold both 
qVal(V) and r d^ V n . 

Therefore the root of T will be f(e' n ,V)p — > t <= II, with premises proof 
trees proving: 

1. v r h c ( e' tP ^ ue ^ n ) l=1 ... n . 

2. P r h c ( Vp -> VF<9 77 ). Since Vp G Dp \ {b} then cither VF<9 = Vp 
or = b. By premise 4 below, W8 ^ b, therefore IV# = Vp. 

3. 7> r h c r'd^rt^ 77. 

4. 7> r h c qVal(VF<9) 4= 77. 

5. 7> r h c n r B <= 77. 

6. V r h c ( r VF sg a o W~V'ew,^ 77. 

7. V r h c ^6* <^= 77 for j = 1 . . .m. 

8. 7> r h c ( r W sg a o W; n )v^ eW j0 77 for ? = 1 . . . m. 

9. V T h c <^-0 <l= 77 for j = 1 . . . m. 

Then we can prove 7^ hx>,c V 5 by applying a QDF-p inference step of the 
form: 

( (ej -» ^fl)R 4= 77 ) i=1 ,„ n (rfl -> f)K, 4= 77 ( 6^ 4= 77 ) j=1 ,„ m 

(/(e n ) -»• *)ttrf ^ 

where 

• di = r\{Wp W G Wi} for i = 1 . . .ra. 

• d£ = | IV G W^}. 

• dj = | VF G Wj } for j = 1 ... to. 
For proving V \~t>,c <P we need to check that 

• d sg di (1 < i < n). Since p is solution of J?', d <1 IVp, and IVp ^ VF'p 
for every W G Wi and every 1 < i < n. Therefore d sg niK^O I W e 
Wi} = for i = 1 . . . n. 

• d ^ a o d' . Since p is solution of d ^ Vp = VF#. From premise 6, 

sg a o VF'<9 for every W G W£. Therefore d sg \~\{W9 \ W G W } = 

d' . 

• d ^ a o d'j (1 < j < m). Analogous to the previous point but using 
premise 8. 

Finally, in order to justify the premises of the QDF-p we must prove: 

• V \~t>,c ( e i — > ti9)#di <= 77, which is a consequence of applying the in- 
ductive hypotheses to the premises 1, ( e\p — > tiO <= H )»=i... n > following 
the same reasoning we applied for the premises of the DC inference. 

• V h-zxc { r t)$d' <= 77. Analogously, is a consequence of the inductive 
hypothesis and of premise 3. 
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• V \~v,c ( 3j9§d'j n )j = i... m . Again a consequence of the inductive 
hypothesis, this time applied to the premise 9. 

— PF. Analogous to the proof for the DC inference step. 

— AC. analogous to the proof for the DC inference step. □ 

Using Theorem [3] we can prove that the transformation of goals specified in 
Fig. [5] preserves solutions in the sense of the following result. 

Theorem 4. Let G be a goal for a given QCFLP{T> 1 C)-program V . Then, the 
two following statements are equivalent: 

1. (a,(J,,n) G Sol-p(G). 

2. (a W p W p, 77) G SolpT(G T ) for some p G Vofo such that vdom(p) is the set 
of new variables W introduced by the transformation of G. 

Proof. Let G = ( S^Wi,Wi ^ /3j )i=i... m , cr and p be given. For i = 1 . . . m, 
consider 8 t T = (S' i} Q l ,W t ) and Q[ = U { r W z ^ W n \ W G WJ. According to 
Fig.0 G T = {Ql, qVal(Wi), r W z & ft n , <5-) i= i... m . Then, because of Def.Op) 
and the analogous notion of solution for CFLP(C) goals explained in Sect.[3J the 
two statements of the theorem can be reformulated as follows: 

(a) Wip ^ Pi and V V vfi &iO%Wip <= LJ hold for i = 1 . . . m. 

(b) There exists p G Valx> with vdom(p) = UI=i var(i?j) such that p G Sole(J?^), 
W t p ft and V r h c {5[a)p <= 77 hold for i = 1 . . . m. 

[(a) => (b)} Assume (a). Note that SiaftWip •<= 77 r is 5[a 4= 11,0'^. Applying 
Theorem [3] (with ip — 5i<j, d = Wip and 77) we obtain V r he {5[o-)pi <= II for 
some pi G Solc(O'ip) with vdom(pi) = vax(Sl'ip) — vax(Oi). Then (6) holds for 

i=l Pi" 

[(b) =>• (a)] Assume (6). Let = pfvar(i?i), i = 1 . . . m. Note that (6) ensures 
V r he (S't^pi <= 77 and p G Sole(47j/ii). Then Theorem [3] can be applied (again 
with ip = 8i(7, d = Wip and 77) to obtain V hp,c Si<j$Wip <= LJ. Therefore, (a) 
holds. □ 

As an example of goal solving via the transformation, we consider again the 
library program V and the goal G discussed in the Introduction. Both belong 
to the instance QCFLP(£7, 1Z) of our scheme. Their translation into CFLP(7?.) 
can be executed in the TOy system [3] after loading the Real Domain Con- 
straints library (cf lpr). The source and translated code are publicly available 
at gpd.sip.ucm.es/cromdia/qlp. Solving the transformed goal in TOy com- 
putes the answer announced in the Introduction as follows: 

Toy(R)> qVal([W]), W>=0.65, search( "German" , "Essay" , intermediate ,W) == R 

{ R -> 4 } 

{ W=<0.7, W>=0.65 } 
sol.l, more solutions (y/n/d/a) [y] ? no 

The best qualification value for W provided by the answer constraints is 0.7. 
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5 Conclusions 

The work in this report is based on the scheme CFLP(C) for functional logic 
programming with constraints presented in |13j . Our main results are: a new pro- 
gramming scheme QCFLP(2?, C) extending the first-order fragment of CFLP(C) 
with qualified computation capabilities; a rewriting logic QCRWL(£>,C) charac- 
terizing QCFLP(£>, C)-program semantics; and a transformation of QCFLP(Z), C) 
into CFLP(C) preserving program semantics and goal solutions, that can be used 
as a correct implementation technique. Existing CFLP(C) systems such as TOy 
[3] and Curry [9] that use definitional trees as an efficient implementation tool 
can easily adopt the implementation, since the structure of definitional trees is 
quite obviously preserved by the transformation. 

As argued in the Introduction, our scheme is more expressive than the main 
related approaches we are aware of. By means of an example dealing with a 
simplified library, we have shown that instances of QCFLP(2>, C) can serve as a 
declarative language for flexible information retrieval problems, where qualified 
(rather than exact) answers to user's queries can be helpful. 

As future work we plan to extend QCFLP(2?, C) and the program transfor- 
mation in order to provide explicit support for similarity-based reasoning, as 
well as the higher-order programming features available in CFLP(C). We also 
plan to automate the program transformation, which should be embedded as 
part of an enhanced version of the TOy system. Finally, we plan further re- 
search on flexible information retrieval applications, using different instances of 
our scheme. 
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